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Overview of Administration Actions 
on Counterintelligence and Security Countermeasures 



INTRODUCTION - 

Mr. Chairman, many of the counterintelligence (Cl) and countermeasure 

" . ■ . • .4 

(CM) initiatives I will discuss today have been previously outlined in recent 
Congressional hearings dealing with the intelligence budget and improvements 
in the Cl and CM arenas, others, however, will reflect some new approaches, 
stimulated in part by reoent events, designed to strengthen our defenses 
against the hostile intelligence threat. All of these initiatives have 
resulted from the exercise of a very functional system for deriving 
counterintelligence and countermeasure policy, and for making legal and 
resource decisions. The Congress, lead by the SSCI and HPSCI, has played an 
important role as part of this overall system. Your interest and support of 
national security matters is acknowledged and appreciated. 



. - . 25X1 


Prior to reviewing the specifics of present and proposed administration 
initiatives, it is important to ensure understanding of the administration's 
principal organization for developing national Cl and CM proposals and 
decisions. In January 1982, National Security Decision Directive No. 2 
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(NSDD-2) , in part, established a number of senior interagency groups (SIGs) to 
assist the National Security Council (NSC) in carrying out its -v , -/ 
responsibilities. Hie SIG for Intelligence (SIG-I), which I chair, is the 
principal forum where the national perspective can be brought to Cl and CM 
policy. Hie SIG-I has two subordinate interagency groups (IGs) which reflect 
the manner in which the Intelligence Community practices the craft of 
countering the foreign intelligence threat. Hie IG for Counterintelligence 
(IQ/CI) is chaired by the Director of the FBI, and the IG for all other 
countermeasures (IG/CM) is chaired by the Deputy Undersecretary of Defense for 
Policy. Each agency or department of the Intelligence Community, as 
appropriate, is represented on these IGs, as is any other Federal Government 
agency or department when matters under their cognizance are being 
deliberated. Secretariat and staff support for these multi-agency groups is 
provided from elements of the DCI's Intelligence Community Staff. | 

Hie SIG-I system supplements but does not replace other Executive Branch 
policy recommending and implementing entities such as the DCI Security 
Committee, the National Telecommunications and Information Systems Security 
Committee, the SIG for Technology Transfer, etc. It does, however, have the 
capability for and mission of ensuring proper national-level coordination of 
Ci and CM matters. Many national-level policy and legal issues are 
developed or reviewed by the IGs and referred to the SIG-I with appropriate 
recommendations. The SIG-I in turn endorses courses of action or refers 
issues to the NSC for implementation decisions. 


All Executive Branch policy recommending or policy establishing entities 

act upon needs identified through their own deliberations, formal studies 
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conducted cxi specific pr clients, or as a result of requests from Congress. Oie 
principal tool which assists in identifying needed improvements is the 
periodic net assessment of the -Hostile Intelligence Services Threat and US 
Countermeasures." This study, conducted at the direction of the NSC, defines 
the nature and scope of the total threat to the United States from hostile 
intelligence services and assesses the effectiveness of our countermeasures 
thereto. The recommendations resulting from these community supported studies 
are subsequently acted upon by appropriate government agencies. Examples of 
other periodic Executive Branch formal examinations of our Cl and CM posture 
are the 1982 study, "Capabilities Against the Hostile Intelligence Threat, 
1983-1988," studies of the adequacy of US counterintelligence (March 1983) and 
countermeasure organizations (July 1983), Cl Data Base Study (June 1983), 
Interagency Research and Development Council study on R&D to Counter the 
Foreign Intelligence Threat (September 1984), and the Macro Resources Data 
Study (December 1984). Each of these resulted in recommendations which have 
been acted upon by pertinent Federal Government agencies and departments to 
inprove our capabilities to counter the threat. 


You will recall the actions taken to examine how best to inprove our 
need for multidisciplinary Cl analysis since this is an example of an 
examination specifically requested by congress. The Community Cl Staff 
subsequently developed its study of Multidisciplinary Analysis (November 1983) 
which was reviewed by the Bross Commission in arriving at its independent 
assessment (November 1983). As a result of this examination, we agreed on the 
need for more formal structuring of our deception analysis capabilities and 
created a National Intelligence Officer (NIO) for Foreign Denial and 
Intelligence Activities to provide guidance and direction to this effort. 
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When circumstances indicate* ad hoc panels or committees are appointed 
to focus blue ribbon expertise and attention on the resolution of counter 
threat issues. Examples of this approach are the appointment of the Secretary 
of State's Advisory Panel on Overseas Security (the Inman Panel) which 
examined issues relating to diplomatic seoirity in the United States and 
overseas, the Secretary of Defense's appointment of a commission (Stilwell 
Commission) to review and evaluate DOD security policies and procedures, and 
the Information Security Oversight Office examination of US information 
security policies. I will amplify the course of these efforts shortly. 


The Intelligence Community structure of the SIG-I and its subordinate 
IGs is for policy and planning. Responsibility for Cl operations rests with 
the FBI and CIA and the military service agencies of DOD. There is close 
collaboration in Cl operations among the operating organizations with the DOD 
elements coordinating their operations with the FBI and CIA as appropriate to 
the locale of these operations. Security is the responsibility of the 
managers/commanders of the individual federal and private organizational 
entities. Security is complementary to Cl with the Intelligence Community 
setting standards and policies, but implementation is the responsibility of 
the individual organization. 


Many of you, and those of us in the Intelligence Community, have 
expressed concern over cases in the past year exposing agent operations by 
hostile intelligence services which have given them access to c lassified and 
sensitive information. The Walker case in particular has done grave damage to 


the national security, and there is no way to ameliorate that fact. I would 
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point out that US Cl operations and security practices in other instances have 
prevented such damage. Had Thomas Cavanagh been successful in his intentions. 


he may well have compromised 


lich, in dollar value alone. 


represents tens of billions of dollars. I cannot calculate the damage that 
would have meant to our defense posture. William Holden Bell and James Harper 
... ^ I Penyu 


were exposed 

Kostadinov, a Bulgarian intelligence agent, was arrested 


While this is gratifying, we have not let down our guard. On the 
contrary, we continue to do everything within our power to look for 
penetrations . Working with information received from these and other defector 

sources, ^ i ves ' 1 ■ " 

believe, a sound insight as to whether or not we are penetrated. 


The CIA has been functioning for almost 40 years. The known loss of 
information through espionage end defection has been remarkably low, 
particularly as compared with the experience of our allies in Europe. 
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What I wish to emphasize to you is that although our 
defenses have occasionally been breached, the system for 
defending against such breaches and detecting them is alive and 
well and Is being improved, with your help, on a continuing 
basis. This Committee has been apprised. In varying ways, of 
past accomplishments. I will review some of those results as I 
highlight selected initiatives now being implemented and what 
measures we are considering for the future in this area. Keep in 
mind that the SIG-I and its subordinate IGs maintain a general 
national context awareness of all of these initiatives which 
facilitates their being monitored and coordinated throughout the 
Federal Government. 


25X1 


Ue are and should be highly concerned about losses of 
information through technical penetration of all sorts — 
recorders, telephones, typewriters, computers. One has to 
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believe, however, that media leaks which broadcast sensitive 
information and frequently false impressions across the world do 
more damage than anything else, not only to our intelligence 
capabilities, but also to our reputation for reliability and our 
ability to deal with other services and other nations. Over the 
last two years, 183 publications of unauthorized disclosures were 
reported to my Security Committee by agencies in the Intelligence 
Community. There were certainly more that were not reported. 
Among them, these agencies conducted 193 investigations of those 
leaks. (More than one agency may investigate the same leak.) 
Forty-eight cases were referred to the Department of Justice. 

Only one of these, the Morison case, was prosecuted. 

Virtually every kind of source we have has been damaged by 
unauthorized disclosures over the last couple of years. Much of 
it results from briefings to and gratuitous comment by Members of 
Congress. Talking to the press about information received in 
briefings jeopardizes the lives of agents. Public discussion of 
what we knew and when we knew it and all publication of 
information received in intercepted communications can result in 
the loss of critical sources. Statements about the Howard case 
indicating something very wrong at the CIA caused people around 
the world helping us to reconsider their cooperation. 


As I said earlier, the oversight committees are part of the 
problem, not all of it. 


25X1 
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The Executive Branch produces these damaging leaks as well 
as the Congress. The President has signed a directive extending 
the use of the polygraph in investigations Involving the 
compromise of security information and has under consideration 
further steps to establish better discipline over classified 
information and more clear-cut workable penalties for its 
unauthorized use. Last year in an agreement between me and this 
committee, it was recognized that public references to covert 
action activities by either the Executive or Legislative Branches 

t 

are inappropriate and that the long-established policy of the US 
Government is not to comment publicly on classified Intelligence 

activities. As we stand today, you have been authorizing large 

\ ' ■ : - 

sums to enhance intelligence capabilities and permitting loose 
talk to seriously damage their value. I am ready and anxious to 
take the steps necessary to correct this situation. 
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WHAT'S BEING IMPLEMENTED 
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The IG/CI and IG/CM are currently acting on recommendations made in the 
1985 national assessment of the hostile intelligence threat, the latest in a 
process of looking at the threat which was initiated in 1978. Fifteen 
recommendations were made in all. Among these are ones dealing with national 
policy guidance for foreign counterintelligence activities 


.f . 
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intelligence threat, improvement of dissemination and exchange of Cl 
information on hostile intelligence abroad, greater SIGINT support to Cl 
activities, a nationai-level policymaking body providing guidelines for 
counter-IMINT programs, policy changes in polygraph examinations, review of 
resources available for department/agency analysis, and additional interagency 
training in specialized areas for FCI personnel. 




A 25X1 


STRENGTHENED FCI CAPABILITIES 

CIA, the FBI and DOD are all appreciably increasing resources dedicated 
to Cl. Since 1980, CIA has createc Cl positions to be filled by 

officers having Cl specialities or experience and by generalist operations 
officers with training or experience in Cl specialties. 
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These liaison 


relationships contribute to our knowledge of the hostile services. 


we believe that the success of the Cl program of CIA's Directorate of 
Operations is based on the premise that each and every operations officer in 
the Directorate, be he a covert action specialist or an operations generalist, 
mist also be a Cl officer. There are, of course, Cl specialists. However, 
much of their job is involved in studying and analyzing the work of the 
operations officer who is involved in general operational work. 


We have learned 


that the theft of Western technology is certainly high up on the 
lists of requirements of the hostile services. Technology theft is also, * •- f 
unfortunately, a success story on their side. We are, therefore, undertaking 
a major program to defeat their efforts. We coordinate our efforts with many 
OS agencies involved and often we work successfully with foreign intelligence 
services with whom we have a liaison relationship. 
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Leaks 



The unauthorized disclosure of classified information and its 
publication by the media continue unabated. IXiring the past two fiscal years, 
183 publications of unauthorized disclosures of classified intelligence were 
reported to my Security Committee by Intelligence Community agencies. Among . . 
' then, these agencies conducted 193 investigations of those leaks. (More than 
one agency may investigate the same leak.) Forty-eight cases were referred to 
the Department of Justice. Only one of these, the Mori son case, was 
prosecuted. I have already discussed some damages caused by leaks in the 
Achille Lauro incident. 

The disclosure of classified information to the news media by cleared 
individuals damages the national security. It hampers or destroys 
intelligence gathering operations. It helps hostile foreign governments 
operate against the United States. It is a reprehensible breach of trust. 

And it is costly to the US taxpayer. Finally, it undermines the credibility 
of our entire security system. The drumbeat of disclosures makes it easy for 
the John Walkers among us to rationalize that they are simply selling for cash 
that which the ’official who spoke on the condition he not be named" are 

giving away free. 
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In 40 cases, the classified information was leaked and published within 
30 days of its production as an intelligence report. 


Unknown does not mean the damage is not 
grave or serious, simply that an accurate estimate cannot be made at the 
time. 


There is a growing public awareness of the pernicious effect of leaks 
upon the national security. With Morison, we have just seen the first 
conviction of an individual under the Espionage Act for providing classified 
information to a publisher. This is good because it shows the criminal 
justice system can deal with aggravated cases of this type. There may be a 
down side, however. This conviction may be used to argue against the need for 
a statute to criminalize the specific crime of passing classified information 
to be published, thus making it available to the entire world, including the 
KGB. The Morison case was unique. Scores of classified leaks are published 
which may be just as damaging but Which may never be prosecuted. We need to 
show the political will to stop the hemorrhaging of classified information. 

And there are signs that the Congress is becoming sensitized to this need. 

Two bills are pending which would make leaking a crime without having to call 
it espionage. Passage of such a law would show the will of the Congress to 
stop this outflow of sensitive data, would put leakers on notice that they are 
in greater jeopardy, and would let the public know that the government is 


serious about keeping its military, diplomatic, and intelligence secrets. 
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Already, some segments of the media have criticized the conviction of 
Samuel Morison on the grounds that he was not a spy in the classic sense of 
working for a foreign intelligence service. The compromise of classified 
information, regardless of the reason, damages our security. Proposals to 
reduce the number of cleared people and to reduce the amount of classified 
information siirply do not face the root of the problem. Those who are 
authorized to receive our secret s must behave responsibly. If everyone 
decides for himself which secrets will be kept and which secrets will be 


disclosed, we have no security. 


525X1 


there 25X1 


is a reluctance to investigate leaks. Senior officials seem likely to protect 
their subordinates if they disclose classified information to support the 
boss's objectives. Most leaks come from intelligence consumers rather than 
its producers. Our ability to investigate, including the use of the 
polygraph, is weakest among those who are most likely to be the source of the 

leaks. \ 


25X1 


Measures to deal with leaks are soon to be considered by the National 
Security Planning Group (NSPG). Options include possible proposed legislation 
and a system to account for and control authorized disclosures. 


25X1 


Personnel Security 


Personnel security is the most important part of any effective security 

program. No security program will be effective if, within the most elaborate 
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physical, technical, communications, and information security systems, there 
is an individual who has been cleared for access to our roost vital secrets who 
is delivering those secrets to our opposition. While total elimination of the 
threat posed by such individuals may not be possible, effective measures to 
discourage such persons from committing treasonous acts and to expose them 
before extensive damage is done are under way. 


The personnel security programs of US Government departments and 
agencies are uneven at any given time. External factors, notably resource 
constraints, cause variations over a period of time even in the program of a 
single agency. Heavy case loads and inadequate numbers of investigators and 
adjudicators inevitably lead to less thorough investigations and to clearance 
decisions which might have benefited from longer, more careful scrutiny of the 
investigative reports. First class personnel security programs require first 
line resources. 

Pursuant to the statutory responsibility of the DCI to protect 
intelligence sources and methods, my Security Committee formulates personnel 
security standards for approval for access to sensitive oonpartmented 
information (SCI). These standards, embodied in Director of Central 
intelligence Directive 1/14, apply universally to government employees, 
military personnel, contractors, and staff personnel of the legislative and 
judicial branches of government who receive SCI. DCID 1/14 is the only 
uniform and the most stringent interagency personnel security yardstick in the 
US Government. It authorizes polygraph testing for those employed in or 
affiliated with organizations which have polygraph p rograms. De cisions have 

been made in this area which I will discuss shortly. 
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I believe the high standards of DCID 1/14 should be applied more broadly 
to other sensitive information and that polygraph testing should become a 
mandatory procedure for all persons nominated for SCI approvals. Simple logic 
dictates that security processing should be the same for all of those who have 
acoess to the same information, regardless of where they are employed. We are 
moving to accomplish this. 


CIA is the only agency which routinely uses polygraph screening as a 
ba sic technique for all of its employees. NSA uses it for screening civilian 
employees and some military personnel in special access programs. Both have 
found empirically that the polygraph is an invaluable adjunct to personnel 
security investig ations . 


CIA h ag placed increased emphasis on a thorough security review of new 
employees before they complete a three-year probationary period. Biis 
includes a full scope polygraph (both 'lifestyle' and counterintelligence 
questions are used). Use of this program played a large role in the release 
from employment of Edward Lee Howard. While the policies and procedures 
leading to termination of Howard’s CIA employment undoubtedly require close 
scrutiny, it is clear that polygraph testing surfaced multiple concerns about 
his suitability. 


change with time. The person hired today will be significantly different, 
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A key aspect of personnel security programs is reinvestigations. People 
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physiologically and psychologically, ten years hence. The recognition of that 
dynamism is important in ensuring continued security suitability. CIA's 

reinvestigation program, which includes repolygraph testing, resulted 

terminations in FY 1984. The Scranage case resulted in part from this 
reinvestigation program. 


we need to give more attention and study to how and why we make 
decisions on clearing people for access to classified information. Four 
decades ago, security screening for sensitive positions focused on the 
individual's loyalty to the United States Government. While loyalty remains 
important today, espionage and treason cases in recent years indicate that 
knowing something about the individual’s own attitudes and agenda have become 
increasingly important. There are signs that some have enjoyed the adventure 
of engaging in espionage; seme have spied on their country to finance 
lifestyles they could not have otherwise afforded; seme may have turned to 
spying for the Soviets because they were rejected as intelligence operatives 
by the United States. There is little doubt that motivations for espionage 
are much more complex than simply embracing an alien ideology or, for that ; 
matter, simply selling out the country for money. 

Our personnel security programs have been weakened to some extent by 
recent legal and social changes. Access to certain official records at the 
federal, state, and local level is being denied to non-law enforcement 
investigative organizations with substantive security responsibilities. 
Legislation may be needed to make such records available, as they once were in 
certain cases. 
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Resources are needed to build the capability to conduct a vigorous 
polygraph program, both for initial screening and for reinvestigations. 
Additional resources are also needed for R&D of new state-of-the-art polygraph 
instruments. 


We do exhaustive studies of recent cases of espionage against the United 
States and evaluate and share among Intelligence Community agencies the 
lessons to be learned about security and counterintelligence. Information we 
have gleaned f ran these recent cases plus that gained through the 
unprecedented high level of defectors provide us the opportunity to intensify 


such studies. 
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We are moving ahead with a SECOM-sponsored project, led by USAF and 
FBI psychologists, to interview people convicted of espionage in an effort to 
improve our understanding of motivation and behavior patterns. 


There is a need to expand efforts to use the behavioral sciences more 
effectively in initial and ongoing personnel security programs. Psychological 
research aimed at identifying individuals who are potential threats to 
security is needed, as well as studies to identify behavior which indicates a 
tendency to violate responsibilities for maintaining seairity. My Seairity 
Conmittee has conducted several seminars for behavioral scientists and 
personnel security officers, seeking to identify specific studies likely to 
produce useful results in this area. 


Industrial Security 


Industrial security is the largest of the countermeasure programs in 
terms of the resources involved, 


Most of the United States Government's effort in this area comes within 


the scope of the Defense Industrial Security Program (DISP), a comprehensive 
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during the FY 1983-FY 1985 period, and involving nearly 14,000 cleared defense 
facilities, over one million cleared contractor employees , and approximately 
16 million classified documents entrusted to their safekeeping. 
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activity administered by the Defense Investigative Service for DOD and 18 
other agencies and departments. Markedly inproved policy development and 
coordination is now effected in this area by the National Industrial Security 
Advisory Conmittee, established following a countermeasures Organization Study 
reconmendation. Complementing DISP efforts is the FBI's Development of ^ 
counterintelligence Awareness (DECA) program which alerts contractors in 
selective government projects to the danger from hostile intelligence 
collectors. . 
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Under Consideration 
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Vfc have examined here what has been done in the past and what 
initiatives are presently being carried on. Now let us look at what the 
future holds. 


The espionage cases of the recent past have indicated that flaws exist 
in our methods of protecting sensitive US Government information from foreign 
collection. The presence in the United States of hostile intelligence 
officers has been permitted to grow to a level which has made the task of the 
FBI and other counter intelligence arms of the government exceedingly 
difficult.j V 

The following are some of the Presidential initiatives which are being 
taken to limi t or prevent these breaches in our security. These steps have 
been worked out within the Intelligence Coimunity, advanced through the SIG-I 
system to the National Security Council where they were forwarded to and 
approved by the President. - 


— — " 32 • 

TCP SECRET 

Approved For Release 2009/09/03 : CIA-RDP86M00191R000300560002-0 






Approved For Release 2009/09/03 : CIA-RDP86M00191R000300560002-0 


25X1 



Approved For Release 2009/09/03 : CIA-RDP86M00191R000300560002-0 



* t • 


■ 

*- •• 



Approved For Release 2009/09/03 : CIA-RDP86M00191R000300560002-0 

A. TCP SECRET ^ 


25X1 



The use of the polygraph frequently is the only effective means of 
investigating unauthorized disclosures of classified information. Biis is a 
consensual crime, known only to the discloser and the recipient of the 
classified information. If we are to make progress toward closing off this 
free flow of information to unauthorized persons, increased use of the 
polygraph is essential. 
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Security Awareness 

At Presidential direction, all agencies and departments of the DS 

Government will enfeark on a new program of security awareness, with procedures 

established to ensure a high level of consciousness among those having access 
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to classified or sensitive information, to the threat from foreign sources, 
lhis program includes the requirement for periodic formal briefings on this 
threat. Such systems are in place in some areas, Hie FBI has a long-standing 
DECA program to alert defense industry personnel of the threat posed by 
hostile services. The DOD Industrial Security Program (DISP) is aimed at the 
Defense establishment, other federal departments and agencies, and 14,000 
cleared contractor facilities with approximately 1.4 million cleared 
employees. Last year, a series of seminars in seatrity awareness and 
education for security educators throughout the government was initiated by my 
Security Connittee. This effort will assist in providing up-to-date 
information and examples for use by those responsible for security awareness 

programs. 


£<-r ■ 

Mr 
* />- 


*&25X1 


Each US Government department or agency will be required by a new 
Presidential initiative to establish procedures requiring employees to report 
contacts with all individuals of any nationality who seek sensitive or 
classified information, and to report any contact with nationals of criteria 
countries, ttiese contacts will be reported by the responsible agency to the 
FBI in the case of employees in the United States, and to the CIA when the 
enployee is located overseas. Existing reporting requirements will continue 

in force. 


MS- 
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CONCLUSION 


Hie NSC-level SIG-I structure provides an effective mechanism for 
developing, monitoring, review, and coordination of counterintelligence and 
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other countermeasure policy and programs. We are making good progress. 


Cl programs cure carried out by FCI agency program managers to meet both 
national and departmental requirements, under NSC-level and statutory 
guidance. Resources are in the NFIP and managed primarily as part of the 
Intelligence conmunity budgetary process. 


Security programs are carried out by agency program managers who 
custom-fit and budget them to respond to the particular requirements of their 
department or agency’s total operations. Overall security policy is set by 
several policymaking elements, such as the Information Security Oversight 
Office, DCI Security Committee, National Industrial Security Advisory 
Coranittee, among others. Interdisciplinary meshing is effected both at the 
NSC level and, in part, through the DCI Security Committee. Resources for 
se cu rity programs are largely outside of the NFIP and are not centrally 
managed. They are handled as part of the government's regular budgetary 
process involving department/agency resource managers and 0MB. 


In conclusion, we are preparing to meet the increased challenges in the 
next few years through: 


— the additional money and positions recently authorized by 
Congress, 

— a deliberate program of building upon the unique capabilities 
of each organization in the Community, 
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— more intensive cooperation and coordination within the 
Intelligence Community such as you have seen on the technical security 
threat to our embassies, . ^ 


— increasing the staff support on these issues to the DCI and 
DDCI with the NIQ/FDIA, 


r. •- 




r:r~ 

m 


■ — the upgrading of Cl and security canoems in the State 

Department, and 

— the new administration 1 s policies we have discussed today and 
will cover further in this series of hearings. 


J-.r 
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